Did you ever figure this out? I have read the docs but still find old outdated examples. From what i think i know is that auth0-lock is for use with the universal login and passwordless. And auth0-js is for building your own UI & the universal login but without password? Would this be a correct assumption?
Also to speed up your loading times you can selectively import only the components you need from each module. For example import {passwordless) from auth0-lock.
Any insight here would be welcome.